New NKAbuse malware abuses NKN blockchain for stealthy comms

December 14, 2023 at 05:16PM NKAbuse is a new Go-based multi-platform malware exploiting NKN (New Kind of Network) technology. It targets Linux desktops, IoT devices, and supports MIPS, ARM, and 386 architectures. It uses NKN for DDoS attacks and as a remote access trojan, making it difficult to detect and defend against. Its use of … Read more

Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

November 20, 2023 at 04:36AM Between 2011 and 2015, Bitcoin wallets are vulnerable to an exploit called Randstorm that allows unauthorized access. Approximately 1.4 million bitcoins may be affected. Customers can check if their wallets are at risk on www.keybleed.com. The vulnerability stems from the use of BitcoinJS, an open-source JavaScript package for cryptocurrency wallets. … Read more

Poloniex crypto-exchange offers 5% cut to thieves if they return that $120M they nicked

November 10, 2023 at 01:53PM Poloniex founder Justin Sun has offered a reward of up to $6.5 million to the hackers who drained $120 million from the cryptocurrency exchange. Sun has given the hackers seven days to return the stolen funds before he engages law enforcement. The attack on Poloniex is the latest in a … Read more

US sanctions Russian who laundered money for Ryuk ransomware affiliate

November 6, 2023 at 12:26PM The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned Russian national Ekaterina Zhdanova for laundering millions of cryptocurrency for ransomware actors and Russian oligarchs. Zhdanova utilized her knowledge of cryptocurrency and blockchain networks to evade anti-money laundering controls. She also facilitated the transfer of large … Read more

North Korean Hackers Tageting Crypto Experts with KANDYKORN macOS Malware

November 1, 2023 at 05:36AM State-sponsored threat actors from North Korea’s Lazarus Group have been targeting blockchain engineers of a crypto exchange platform through Discord using a new macOS malware called KANDYKORN. The attacks involve social engineering lures and a multi-stage process to deliver the malware. The Lazarus Group has previously used macOS malware in … Read more

October 10, 2023 at 12:16PM – North Korea’s State-Sponsored APTs Organize & Align

October 10, 2023 at 12:16PM North Korean APT groups have increased collaboration and coordination during the COVID-19 pandemic. The lines are blurring between individual groups, making it difficult to determine responsibility for specific threat activities. North Korean actors are diversifying attacks, sharing tools and code, and targeting the supply chain. Collaboration between defenders, governments, and … Read more